CVE-2019-18905

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

CVE-2019-18905

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

Design/Logic Flaw

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

CVE-2019-18905

CVE-2019-18905 describes an insufficient verification of data authenticity in autoyast2 for SUSE Linux Enterprise Server 12 (autoyast2 4.1.9-3.9.1 and earlier) and SLES 15 (autoyast2 4.0.70-3.20.1 and earlier). This could enable a remote attacker to perform MITM when deprecated/unused autoyast fu...

CVE-2019-18905 Deprecated functionality in autoyast2 automatically imports gpg keys without checking them

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

DEBIAN-CVE-2019-15795

python-apt only checks the MD5 sums of downloaded files in Version.fetchbinary and Version.fetchsource of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows a man-in-the-middle attack which could potentially be used to install altered packages and has been fixed in versions...

CVE-2019-17654

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

CVE-2019-17654

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

Cross site scripting

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

CVE-2019-17654

CVE-2019-17654 pertains to FortiManager: an insufficient verification of data authenticity vulnerability could allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH) attack. Affected products/versions are FortiManager 6.2.1, 6.2.0, 6.0.6 and below. The connected doc...

CVE-2019-17654

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

GHSA-9VG3-CF92-H2H7 Insufficient Verification of Data Authenticity in python-keystoneclient

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

Insufficient Verification of Data Authenticity in python-keystoneclient

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

The vulnerability of the Cisco AnyConnect Secure Mobility Client cryptographic protection mechanism is related to insufficient verification of data authenticity, which allows attackers to trigger service failures or disclose protected information.

The vulnerability of the Cisco AnyConnect Secure Mobility Client encryption method is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to cause service failures or expose the protected information...

Vulnerability of Cisco IOS XE and Cisco IOS web interfaces, allowing attackers to perform cross-site forgery attacks

The vulnerability in Cisco IOS XE and Cisco IOS web interfaces is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests remotely...

The vulnerability of the SAP Process Integration integration platform, related to insufficient verification of data authenticity, allows attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Process Integration integration platform is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

Huawei Data Communication: Insufficient Verification of Data Authenticity Vulnerability In Some Huawei Products (huawei-sa-20191204-01-validation)

Some Huawei products has an insufficient verification of data authenticity vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CVE-2019-5291

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...

CVE-2019-5291

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...

Design/Logic Flaw

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...